> -----Original Message-----
> From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] 
> Sent: Friday, February 17, 2006 21:34
> To: Dallas L. Engelken
> Cc: users@spamassassin.apache.org
> Subject: Re: Over-scoring of SURBL lists...
> 
> Dallas L. Engelken wrote:
> > The result will be no URIBL only FPs.  OTOH, you may end up with a 
> > shit-ton of people bitching about spam accuracy dropping in 
> stock 3.2 
> > installs if you make these changes.
> 
> I'm not sure it'd be *that* bad.
> 
> A grep of my logs from this week shows that 1.1% of my spam 
> scores under a score of 8 and only 13% of those spams hit 
> *any* URIBLs.
> 
> So yeah, there'd be more FNs, but I'm not sure that it'd a 
> shit-ton of them.
> 
> 

All I know is I've had a few system bit by 
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4767

And when this happens, I hear about it, because people are complaining about
getting a "shit-ton" of spam.  And all just run SBL/URIBL/SURBL.  No other
RBLs.   Now I understand loosing URIBL tests completely versus scoring
between say 2 and 5.5 are completely different things... but I still believe
a considerable increase will be seen in FN's.

Which phone call would you rather have?

  Q)  My client is trying to send me email and its being rejected because
they are listed on URIBL, what should I do?  
  A)  whitelist the sender or request delisting from the URIBL

  Q)  How do I block all this stock, pill, porn, etc spam that started
coming in since we "upgraded"?
  A)  Well, you can re-adjust your heuristic scoring for your URIBL tests
back to their previous values, let me walk you through that.. 

The first question can be answered in 1 minute.  

The second question OTOH could take you a considerable amount of time.
Especially if you have to do it for them.  Oh, and you have to wait for them
to reconfigure their PIX (that they don't know how to administer) before you
can get in, and they want you to wait on the line until they figure it out.
Meanwhile client X, Y, and Z are waiting for you to get off the phone so you
can do the same thing for them ;)
 
All I'm saying here is, I'll take the easy route :)

Dallas






Reply via email to